Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: Xxefb6lHwlnT1IX6DxAehglrJv3cBvmimVj5S6jI2xA=
Subject key identifier: F8:62:5B:40:26:5C:A3:ED:03:AF:B0:BD:8D:AD:69:AE:A3:59:CA:EF
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 019F9512C3147181A812BD982787E7B18822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0DC1
Signing time: Fri 24 Jul 2026 17:01:02 +0000
Manifest this update: Fri 24 Jul 2026 17:01:02 +0000
Manifest next update: Sat 25 Jul 2026 17:01:02 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: tQ6tdONHxfaXHfhwN/VHqZB1M+nIhFcX5tVqoyCdyNE=)
2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:c3:14:71:81:a8:12:bd:98:27:87:e7:b1:88:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Jul 24 17:01:02 2026 GMT
Not After : Jul 25 17:01:02 2026 GMT
Subject: CN=f8625b40265ca3ed03afb0bd8dad69aea359caef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7b:de:00:3b:37:45:98:05:fe:f0:dd:a4:f6:
84:40:c9:ac:4d:96:31:d9:ca:5b:53:c8:95:26:bd:
04:02:ff:02:13:fc:68:a4:04:36:b1:d4:c8:01:b8:
67:f8:96:56:61:ed:0a:97:17:08:56:25:bb:f7:b4:
7a:ff:00:bd:46:a5:3b:b7:bc:05:5a:6f:3a:4a:73:
74:3c:93:12:69:2b:ea:51:e7:ab:e9:11:4b:e3:03:
35:79:da:12:c9:f1:7a:06:6e:58:81:34:c1:3f:4f:
4c:25:23:3e:42:f0:4b:45:56:68:10:87:b8:9e:fd:
b3:6b:e2:1c:7e:cd:be:c5:77:e6:08:ce:a9:ce:cb:
7e:4d:50:93:bb:07:ba:d3:5b:6b:cb:84:5d:88:8e:
e4:8e:13:97:77:b9:d3:12:c6:ed:02:2c:64:a9:cd:
36:b0:75:e6:3a:bc:d9:a9:5f:eb:38:f0:84:27:74:
85:86:ab:a5:cd:22:44:d7:ae:fa:67:eb:8a:cb:46:
73:34:0c:af:1e:b1:54:75:14:0e:02:68:e1:c5:be:
77:d2:65:80:a3:20:07:e7:14:2e:55:c7:4e:23:20:
a5:9f:61:f9:78:53:76:d7:6d:5b:4d:cb:e5:c1:1d:
bf:46:b7:17:f3:63:2d:1a:3d:8a:81:cf:05:f2:6e:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:5B:40:26:5C:A3:ED:03:AF:B0:BD:8D:AD:69:AE:A3:59:CA:EF
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bb:d0:89:b0:40:dc:69:af:39:e3:6a:cf:8a:d5:0f:d8:b2:
12:b6:ac:9f:f9:28:e2:36:8d:5c:98:a4:a9:28:97:7d:d5:9b:
9c:64:53:fa:fb:27:b9:4d:d8:b2:f3:61:ff:03:db:d5:e9:26:
e9:ad:81:6c:a6:32:ab:80:5e:75:42:1c:eb:10:c5:5e:a2:ff:
49:7b:44:a8:27:ac:a1:3b:c0:0c:e2:6e:dd:fd:f1:02:21:e6:
c8:37:d0:6f:56:e9:30:a3:8d:e6:d6:25:88:1c:d0:16:17:5a:
2c:01:b9:40:d7:e3:85:d6:74:a2:4b:9e:28:df:be:43:9e:18:
6f:e9:a3:fe:40:6c:1b:6c:36:e5:2b:ef:a4:e6:31:a6:59:23:
fe:c7:5d:cb:34:1a:70:1c:4e:33:58:ef:27:1a:4a:70:89:5b:
4c:9a:d4:68:33:db:e9:aa:6c:dc:4c:f4:2b:81:bc:bd:94:bc:
cc:13:a2:10:1e:a4:fe:f9:c3:5a:72:d3:56:6a:fb:16:e7:e0:
a8:c6:a0:c0:a3:6a:63:3a:f8:9b:b3:f5:71:39:20:66:08:32:
c4:ed:4d:4a:52:4e:51:a1:f9:fb:cf:62:dd:79:a8:69:da:4c:
f5:d8:68:61:7e:74:e0:34:28:12:fc:3e:f6:06:1d:92:e6:94:
48:d1:42:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:02:46 2026 by rpki-client